Trend Micro Security

Microsoft Internet Explorer Same Origin Policy Bypass Vulnerability (CVE-2015-0072)

2015年7月21日
  危険度: : 中
  CVE識別番号: CVE-2015-0072

  概要

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka "Universal XSS (UXSS)."

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1006472
  Trend Micro Deep Security DPI Rule Name: 1006472 - Microsoft Internet Explorer Same Origin Policy Bypass Vulnerability (CVE-2015-0072)

  影響を受けるソフトウェア

  • microsoft internet_explorer 10
  • microsoft internet_explorer 11